The rapid growth of information technology has a positive impact in every
aspect of life, one of it is the internet. We can see from the increasing number of
website users for government, education, organization and even private matters.
With easy access to it we can notice that some government institutes build website
with low security. Website is an information service that is most accessed by users
that is connected to internet. Universitas Muhammadiyah Purwokerto (UMP), one
of education institution, uses website as a media to deliver wide range and
unlimited informations. It is equal to the number of website usage and is followed
by the risk of being hacked. Therefore, important doing a regular self-pentest to test
the vulnerabillities of the sia.ump.ac.id website. This test carries out 9 sessions:
Information Gathering, Network Mapping, Vulnerability Identification,
Penetration Testing, Gaining Access & Privilage Escalation, Enumerating Further,
Compromise Remote Users/Sites, Maintaining Access, and Covering Tracks.